The SSH File Transfer Protocol, (sometimes called Secure File Transfer Protocol, Secure FTP), or SFTP, is a network protocol that provides file access, file transfer, and file management functionality over any reliable data stream.

learn more… | top users | synonyms

65
votes
2answers
91k views

SFTP logging: is there a way?

I'm wondering if there is a way to log commands received by the server. It can be all SSH commands, as long as it includes information on commands related to file transfer. I'm having issues with an ...
50
votes
7answers
41k views

Allow SFTP but disallow SSH?

I'm starting a very little hosting company for a few friends and little clients, nothing big. I want to give my "clients" the right to manage their files on the server. I hate FTP as it is not secure ...
17
votes
5answers
39k views

How to put desired umask with SFTP?

I have a SFTP server (openssh/sftp-server) and I would like to set umask 002 for users using this service. I tried setting PAM (pam.d/common-session), and .profile for each user, but no luck. With ...
11
votes
9answers
2k views

SSH to a computer that will then SSH to another computer [duplicate]

Possible Duplicate: How to configure a shortcut for an SSH connection through a SSH tunnel I have a situation where I would like to have SSH/SFTP access from my workstation to a server that is ...
35
votes
5answers
44k views

Is it possible to use rsync over sftp (without an ssh shell)?

Rsync over ssh, works great every time. However, trying to rsync to a host which allows only sftp logins, but not ssh logins, provides the following error: rsync -av /source ssh user@remotehost:/...
9
votes
4answers
10k views

FTP v/s SFTP v/s FTPS

We're setting up a web server at our workspace. In conjunction, we're planning to install an FTP server, however I'm stuck at what protocol to employ -- FTP, SFTP or FTPS. I googled around, trying to ...
7
votes
1answer
6k views

Does OpenSSH SFTP server use umask or preserve client side permissions after put command (chrooted environment)?

I know this question has been already discussed, but by reading the posts I could not figure the answers, because some said "yes umask can work", and others say "OpenSSH put command always preserve ...
3
votes
1answer
2k views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
2
votes
1answer
243 views

fatal: bad ownership or modes for chroot directory component “/” in SFTP

I've been trying to configure sftp in a debian server.sshd_config: Subsystem sftp internal-sftp UsePAM no Match User sftpUser ChrootDirectory /users/sftp/sftpUser ForceCommand internal-sftp ...
10
votes
4answers
10k views

How can I create a user only for sftp?

I have added a user to the system via the adduser tool. Then, in /etc/passwd, I tried changing the /bin/bash to /sbin/nologin or to /dev/null, but neither of these worked. I would like the user not ...
0
votes
1answer
339 views

How can I create a user account that only allows for uploads via sftp?

I currently have a website with an upload page. We have users who want to upload lots of data (gigabytes), and the website is proving to be fickle. As a result, we're considering letting the users ...
18
votes
3answers
17k views

OpenSSH: Difference between internal-sftp and sftp-server

Why are there two ways to setup SFTP with OpenSSH and when to use which? Is there any difference between them? I mean the first one is using a lib from OpenSSH and the second one says "use the ...
8
votes
5answers
12k views

How does RSYNC does incremental Backups

How does RSYNC knows which files are chnages and which are not. Does it logs its data anywhere in the file. Because I want to do incrrmental backups but first it will transfer all files. So my main ...
7
votes
4answers
8k views

How do I setup SFTP for sites without giving shell access?

I'd like to use SFTP for all the sites on my cPanel CentOS server as we had an FTP password hacked before (not hard). However I don't want each sites SFTP account to have shell access (not even jailed ...
4
votes
1answer
11k views

SFTP: log to a separate file for chrooted user

I would like to log SFTP commands to a separate file however it works only for root but not for chrooted user: # cat /etc/ssh/sshd_config ... Subsystem sftp internal-sftp -l INFO Match Group ...
4
votes
3answers
2k views

set up a chrooted SFTP login with OpenSSH

How might I create an SFTP login for an untrusted user in which he can only access the files in his own home directory and not run any commands? The online tutorial OpenSSH SFTP chroot() with ...
0
votes
1answer
2k views

Connecting to passive FTP over SSL (ftps)

I have setup an FTP service in Windows Azure using this guide http://www.itq.nl/blogs/post/Walkthrough-Hosting-FTP-on-IIS-75-in-Windows-Azure-VM.aspx The FTP Server works well when I connect without ...
22
votes
14answers
50k views

Is there an open source tool to map SFTP connections as a Windows mapped drive? [closed]

I know there are many commercial products that accomplish this task, but I'm looking for something like SSHFS but for Windows systems, which is open source. WinSCP FAQ points to the the KeepUpTODate ...
9
votes
4answers
4k views

Methodologies for performance-testing a WAN link

We have a pair of new diversely-routed 1Gbps Ethernet links between locations about 200 miles apart. The 'client' is a new reasonably-powerful machine (HP DL380 G6, dual E56xx Xeons, 48GB DDR3, R1 ...
11
votes
2answers
16k views

How do I set default permissions for SFTP for an Ubuntu Server?

We have an Ubuntu 10.04 server. How can I set it so that new files created (or copied) over SFTP or SSH have g+rw and g+rwx permissions (where appropriate)? I'm also using setgid (chmod g+s) so that ...
17
votes
1answer
71k views

How to add user with SFTP/ FTP access to '/var/www/html/website_abc' folder on Amazon EC2 Centos?

Possible Duplicate: Linux directory permissions I'm working with some third-party developers and I would like to grant SFTP (or FTP) access to the root folder for a website they're working on ...
14
votes
3answers
9k views

Set up sftp to use password but ssh not to use password

Is it possible to set up a user on ubuntu with openssh so that ssh does not use password authentication but sftp does? I assume that if I change /etc/ssh/ssh_config to have PasswordAuthentication yes ...
11
votes
4answers
4k views

Securing file system for secure SFTP server

This might not seem as a development question, but in essence it is. Let me explain how. Our main development focus is dynamic content pages. Some of our customers have asked us to allow them space ...
11
votes
10answers
78k views

How can I map a SFTP to a Drive, natively in Windows [closed]

Today I saw that Vista and Win7 (which I am using) have the option to map ftp natively, according to this article: http://cybernetnews.com/cybernotes-map-a-ftp-to-a-drive-in-windows/ But I need to ...
9
votes
2answers
19k views

SFTP fatal bad ownership or modes for chroot directory ubuntu 12.04

I just set up my SFTP server and it works fine when I use it from my first user account. I wanted to add a user which we will call 'magnarp'. At first I did like this in sshd_config: Subsystem sftp ...
8
votes
3answers
4k views

Restricting the network access of Docker container

I'm in the process of creating an SFTP only Docker container, one that will be used by multiple people for the sole purpose of uploading and managing files in their own chrooted Environment. On paper,...
3
votes
4answers
3k views

Wordpress can't find ssh public and private key pair

My server configuration is as follows: CentOS 5.8 (final) running Nginx. I am using the SSH2 feature of Wordpress's plugin installer. I have installed lib2ssh and it is working (Wordpress is ...
13
votes
3answers
5k views

Use .bashrc without breaking sftp

My problem is that I need to set a few variables, and output a few lines every time I login to the ssh shell, and at the same time I have to be able to use sftp to tarnsfer files via Filezilla. Now, ...
6
votes
3answers
7k views

Trying to setup chroot'd rsync

I'm trying to set up a backup server. I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync. I quickly discovered that I was not the only one trying to do ...
2
votes
1answer
3k views

A proper way to create a chrooted SSH on CentOS 7 [closed]

There are a lot of tutorials of how to create a chrooted SFTP, but I would like to use SSH, because it is much faster to simply wget, unzip, mysql and mysqldump than tossing around the FTP and ...
19
votes
2answers
34k views

Is IIS SFTP natively supported by Windows Server 2012 R2?

Does Windows Server 2012 R2 have native SFTP support? I see a role FTP Server but it doesn't say whether this includes SFTP.
8
votes
1answer
432 views

How to detect or log interrupted uploads with OpenSSH SFTP server?

I have this problem where a customer of ours has been SFTP-ing truncated data. I'm not sure if the problem is on our end or his. I've enabled SFTP logging but it does not allow me to detect if an ...
7
votes
2answers
15k views

How do I set up an sftp user to login with a password to an EC2 ubuntu server?

I have an Ubuntu Server running on an EC2 instance. To login to that server I use a certificate file without any password. I've installed and configured vsftpd and created a user (let's call him "...
4
votes
4answers
3k views

It is fair to jail my SFTP users to their home directory?

roots. I'm running an Ubuntu 9.04 (home) Server on my LAN. I currently use it to store little web apps, photos, some subversion repository and stuff like that. My (few) users are friends of mine and I ...
2
votes
1answer
6k views

CopSSH SFTP — limit users access to their home directory only

Let me preface this by saying I've read and followed these instructions at the FAQ many times: http://www.itefix.no/i2/node/37 It does not do what the title claims... It allows every user access to ...
6
votes
2answers
3k views

How to allow multiple people to change mtime -timestamp of a file through sftp?

I have a directory that multiple users have access to. They change, upload, and delete files in the directory. They all belong to the same user group. The files in the directory have access rights of ...
6
votes
4answers
4k views

How to restrict everyone except a certain group in SSH?

I want to restrict all users on a server to only be able to use SFTP while the members of an admin group should have full SSH access. I found that it is possible to restrict the members of a group by ...
5
votes
2answers
844 views

nginx clobbering sftp traffic during peak times - is tc the answer?

This is probably a continuation of my previous (unanswered) question because the underlying cause is probably the same. I have a Linux server with nginx and sshd running on it. It's on a shared ...
5
votes
2answers
4k views

How to execute a script on sftp connection?

I run an ssh server on my machine and I restrict access to certain users to sftp only with internal-sftp & ChrootDirectory. What I need is a way to execute a script before chrooting users. ...
4
votes
3answers
673 views

SFTP access akin to jailed shell

I have a question about creating a user with sort of jailed shell access (actually all is required of this user is an sftp access to one particular directory). Scenario is as follows - I have an ...
4
votes
2answers
7k views

How can I set up an SFTP server backed by S3 (or similar)

I need to set up an SFTP server that, essentially, has very large capacity. I need to give one of our partners SFTP login details to a server where they will upload millions of files, totalling a few ...
2
votes
0answers
542 views

Debian squeeze: SSH login works fine, SFTP login returns a Failed password error

I'm currently trying to setup SFTP on debian using openssh. I can still login with all my users using ssh, but as soon as i'm trying to login using an SFTP client like filezilla i'm getting an failed ...
1
vote
4answers
6k views

SFTP server giving a Type 2 (protocol error) for all connections

I've got a windows server using CoreFTPServer and any connections to any SFTP site on it are giving a type 2 (protocol error). This seems to be for any connection made to the server from any user or ...
6
votes
1answer
514 views

Forward SFTP user to chroot subdirectory after authentication

I've set up a SFTP server using OpenSSH, everything works fine and the users I created can connect. After authentication, the users find themselves directly inside /chroot, a directory they are not ...
1
vote
1answer
566 views

Automatically retrieve a specific file via SFTP

How do I determine which file is the newest from a remote server that I am connected to via SFTP? My goal is to retrieve a specific file each day, via SFTP. The steps I will follow are: Connect to ...
1
vote
1answer
165 views

Daily sftp stops working, and weekly sshd fails and needs reinstall

My server has daily issues with its SFTP. Everyday I need to change the SFTP subsystem. Everyday it gets reset to: Subsystem sftp /usr/libexec/sftp-server While it has to be: Subsystem ...
1
vote
1answer
4k views

How to disable sftp subsystem for a specific user or group?

On a linux server running OpenSSH, How can I disable sftp access (the sftp subsystem) for a specific user/group? The user should only be able to access a shell but have no sftp access. Edit: The ...
1
vote
3answers
1k views

sftp chrooted dosent work with some sftp client (Cyberduck)

I'm not able working on SFTP+chrooted env Using internal-sftp directive it works, but i'm not able to set umask. (ex umask 002) Using sftp-server from openssh package dosent't work because login shell ...
1
vote
2answers
935 views

Internal SFTP Settings

Goal: to limit user access to home directory and symlinked directories in home. I tried the following configuration in sshd_config # Subsystem sftp /usr/lib/openssh/sftp-server Subsystem sftp ...
1
vote
2answers
2k views

SFTP being blocked outgoing

I have an issue where on my server sftp is being allowed in but from the server I cannot go out. I have modified the packet filter to allow this. The rules I have added are as follows SFTP ...